Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
File: NrVfs00p-WJUUTKgJbUmRP3_v28.mft (raw, json)
Hash identifier: mwxFoLlTWgn0siP7PeEGvUNkv0IZxLKqwK76L2mnDME=
Subject key identifier: 1A:F5:06:14:29:6E:51:C8:AF:A3:36:4E:A4:AD:79:BF:CD:4E:53:66
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 0194BC3BD4623EE358B2AF9E0D7C3DD21ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
Manifest number: 1007
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: 7dJIur2rO8jTQ_NHZt4L26PKtBw.roa (hash: fR/fcQi32Cz8cbo8M3f8TE+0bMDxdxf78ySV2CU/bwY=)
2: EzVC6hFH0RtKA1lARrwdwMJ07Q0.roa (hash: 2S3sYcvaMN06mor0RfdxJiX/gftEZ6TMLtUoAQi1mDE=)
3: NrVfs00p-WJUUTKgJbUmRP3_v28.crl (hash: +N26rEbsUEIk1Wbat8UTZ6Nt/Qyt0zcUG0lKVCEyD1Q=)
4: Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa (hash: 0aRSdpBzh4xSW9RCKPtMxwA4FTF50Xso2kHVHvgf+yc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d4:62:3e:e3:58:b2:af:9e:0d:7c:3d:d2:1a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=1af50614296e51c8afa3364ea4ad79bfcd4e5366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:69:72:45:27:58:e8:6d:5b:46:5f:78:98:
87:02:92:53:bd:4b:a4:1c:ce:ee:a8:29:1a:3b:4e:
ea:cb:36:60:6b:88:a2:f3:4e:33:45:b9:6e:fe:c9:
a7:98:ba:40:33:30:52:7d:eb:bb:6b:3d:0b:8f:c9:
de:f7:b4:d2:c5:06:f8:e0:72:f1:04:27:13:b4:44:
40:a3:0c:73:a0:51:06:22:2a:7b:64:5f:41:e9:e2:
c6:92:de:94:c0:a5:45:39:4e:4d:dd:d4:2a:aa:40:
93:a2:1a:e6:1e:a1:e7:0d:88:d3:b5:eb:73:45:00:
61:38:a5:d8:d3:45:97:2b:e8:5e:d2:4c:05:39:de:
13:ed:7c:b2:90:40:4c:8e:81:4e:be:6c:9c:1c:30:
59:a2:c0:6a:f8:98:d0:3e:d4:4a:8a:d4:a0:cf:cd:
70:36:10:34:63:f1:7c:83:7e:f3:a2:dc:53:70:7e:
1e:74:fe:64:ae:75:4d:11:4e:d2:59:52:f6:f3:a3:
f7:6d:03:93:ae:5c:12:2e:08:45:ba:31:c5:c6:62:
8d:5a:7a:6a:21:11:e5:f1:4e:8c:eb:78:5f:58:42:
5e:d6:bd:21:9b:ad:cb:4f:44:11:bf:cd:6b:cb:a0:
0d:99:37:de:3b:20:b2:b2:1c:e0:76:6c:8c:87:b7:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F5:06:14:29:6E:51:C8:AF:A3:36:4E:A4:AD:79:BF:CD:4E:53:66
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c7:70:8a:8e:7b:b5:b7:4d:fc:71:3e:98:fc:b7:a4:5b:29:
2b:3a:a2:cb:d8:89:56:1e:36:47:21:e4:66:58:c6:48:a6:97:
6c:de:42:4e:1a:59:8a:87:ef:fe:e8:22:f9:cc:01:08:9e:a8:
82:ce:82:57:9b:82:e6:f3:b2:70:65:8c:45:29:0a:00:69:3d:
3f:54:59:a5:9c:7f:71:89:3a:58:28:ea:76:78:3c:9a:5f:8d:
11:45:95:77:61:14:61:14:3b:9d:12:c2:e2:b2:ab:fe:21:af:
4e:55:5a:03:c5:af:b0:50:15:57:d9:30:68:80:76:4a:93:13:
8e:cf:92:9a:7b:5b:73:fa:1d:2b:56:14:be:74:71:04:b2:64:
c4:0d:30:df:a4:12:17:9f:fd:1b:57:41:0d:64:23:86:6b:33:
50:27:7a:bf:c0:b7:80:13:7e:e5:f1:69:4e:6f:47:8e:dd:92:
35:b8:62:6e:8c:df:d7:95:0f:4a:bc:bf:5a:32:1d:4c:61:d0:
ee:b4:d3:0d:1e:c7:d9:cc:51:82:8d:b4:ce:57:13:0f:d3:c2:
d8:2c:7a:55:97:22:c3:09:63:53:4c:0b:61:b9:a5:c1:19:4f:
ba:d5:a1:6b:a6:b8:e9:1d:44:b9:e7:de:7c:68:50:44:79:b9:
da:a2:8c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:01 2025 by rpki-client